BSidesSF 2018

Coinminers have been on the rise in 2017, causing slow down on home computers, massive overage to cloud providers, Highjacking someone else’s CPU power for money. This rise of Coinminers have set me on a journey diving into this new world, trying to shed some light on this emerging threat and finding ways to eradicate it. Our journey begins by exploring the magnitude of this phenomenon, its technical pieces, discovering ways to capture these vicious creatures and extracting vital intelligence from them. Using this intelligence, we are able to put the spotlight on (some of) the people behind it and automate doxing tactics to hunt crypto-miners in scale. But we could not stop at just doxing them, diving deeper into the rabbit hole we have found ways to
track profits and revenue of this campaigns. To our astonishment, we have found some millionaires. We will use all of our discoveries to share generic defensive tactics to detect, prevent and remediate Coinminers from as many computers as possible. Finally, we will share key predictions of what’s coming next from this new evasive threat.